Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A915307C/BA8C8A9E63D911F189816C108447A888/YJ2c1ejV8Jf3AOwTIt7dRDCBl-s.mft
File:                     YJ2c1ejV8Jf3AOwTIt7dRDCBl-s.mft (raw, json)
Hash identifier:          10Is0Peh0+IpiQ4LSUDpJMvEDlrXkgQO89pZmpAXUWI=
Subject key identifier:   81:11:5E:71:68:92:E0:B7:CF:41:36:5D:7F:D6:79:C5:25:FD:86:D9
Authority key identifier: 60:9D:9C:D5:E8:D5:F0:97:F7:00:EC:13:22:DE:DD:44:30:81:97:EB
Certificate issuer:       /CN=A915307C/serialNumber=609D9CD5E8D5F097F700EC1322DEDD44308197EB
Certificate serial:       3F
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YJ2c1ejV8Jf3AOwTIt7dRDCBl-s.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915307C/BA8C8A9E63D911F189816C108447A888/YJ2c1ejV8Jf3AOwTIt7dRDCBl-s.mft
Manifest number:          3E
Signing time:             Wed 07 Oct 2026 09:06:57 +0000
Manifest this update:     Wed 07 Oct 2026 09:06:56 +0000
Manifest next update:     Wed 14 Oct 2026 09:06:56 +0000
Files and hashes:         1: YJ2c1ejV8Jf3AOwTIt7dRDCBl-s.crl (hash: pNMjsS6xb/7ouw/8mLF9ZXnJExeOp/NExqzxmvG0sQI=)
                          2: 4A5161F463DA11F18803A8B98447A888.roa (hash: s+ETcjgKMznsV0hPLHChNZ83FbOj0Ckmfwu/mAyqAVA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915307C/BA8C8A9E63D911F189816C108447A888/YJ2c1ejV8Jf3AOwTIt7dRDCBl-s.crl
                          rsync://rpki.apnic.net/member_repository/A915307C/BA8C8A9E63D911F189816C108447A888/YJ2c1ejV8Jf3AOwTIt7dRDCBl-s.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YJ2c1ejV8Jf3AOwTIt7dRDCBl-s.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 14 Oct 2026 09:06:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 63 (0x3f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915307C, serialNumber=609D9CD5E8D5F097F700EC1322DEDD44308197EB
        Validity
            Not Before: Oct  7 09:06:56 2026 GMT
            Not After : Oct 14 09:06:56 2026 GMT
        Subject: CN=6ac60bb0-3c2c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:60:85:7d:eb:b1:97:1c:ad:90:5e:1c:92:81:
                    69:61:d1:5e:8d:d8:d6:9d:d0:2e:15:67:af:9e:ba:
                    a3:62:14:0b:ac:25:2c:63:e5:0d:48:0b:96:d0:fc:
                    13:b1:80:37:28:5c:88:e1:52:ce:14:cd:c2:a1:23:
                    9b:a7:dd:91:98:94:53:0e:ce:44:1d:da:86:b2:45:
                    22:6f:db:8a:82:10:f5:a0:15:e2:ed:9f:8c:15:0e:
                    38:52:f8:41:6b:b6:0d:1c:34:75:25:75:6d:09:e7:
                    31:bd:05:a2:7e:a1:c6:a9:49:5a:60:d4:2b:3a:64:
                    8c:b3:bb:46:b4:90:73:4d:2c:c4:ea:6d:96:b6:f3:
                    52:ae:78:1d:b9:2c:13:05:42:fc:a9:db:86:71:f8:
                    09:9a:a7:ad:5d:27:51:00:df:eb:ec:6a:53:f5:f4:
                    79:1f:6e:cd:78:6a:be:1c:14:80:ca:2f:60:40:fc:
                    b8:92:74:88:f8:c9:2a:bd:e8:46:38:62:cd:83:af:
                    e8:89:56:24:29:73:43:c7:86:46:3f:0c:b5:b5:b4:
                    16:f6:9c:34:16:0a:99:11:d1:e7:03:21:98:37:5b:
                    03:e8:86:aa:8e:a5:ab:2c:7d:80:b8:c6:c0:b8:48:
                    52:31:38:e5:d1:9d:dd:cb:ef:9c:b8:1a:64:ec:6f:
                    3e:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:11:5E:71:68:92:E0:B7:CF:41:36:5D:7F:D6:79:C5:25:FD:86:D9
            X509v3 Authority Key Identifier:
                keyid:60:9D:9C:D5:E8:D5:F0:97:F7:00:EC:13:22:DE:DD:44:30:81:97:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915307C/BA8C8A9E63D911F189816C108447A888/YJ2c1ejV8Jf3AOwTIt7dRDCBl-s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YJ2c1ejV8Jf3AOwTIt7dRDCBl-s.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915307C/BA8C8A9E63D911F189816C108447A888/YJ2c1ejV8Jf3AOwTIt7dRDCBl-s.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a8:f6:3c:f9:da:ff:ce:d8:f5:b3:ca:5b:ac:75:52:39:ee:10:
         29:58:b1:d8:7d:8d:43:ce:64:5a:c7:cf:48:01:55:2c:be:a6:
         54:a7:77:c4:21:82:79:5f:60:43:c1:9e:0b:97:c1:f2:12:46:
         0a:22:b3:d5:e4:60:ed:9c:2e:56:6b:e2:bd:e2:b1:fc:c1:8e:
         6e:38:1e:1e:b5:fd:c3:b2:b7:fa:f2:e1:00:cc:e0:25:aa:a9:
         72:d0:3c:3f:31:5f:1f:9b:e8:b0:a4:9a:13:a6:76:51:f7:9d:
         ee:1e:14:d2:5b:e5:72:cc:e5:b8:10:fe:f3:2d:f7:7e:6b:63:
         10:0d:84:e8:0a:aa:0d:c7:07:77:7d:bf:1d:8b:37:6f:e2:80:
         ac:14:bb:ed:9e:bb:24:bf:e1:6f:b5:c6:61:a2:0b:85:b6:c3:
         41:38:dc:2f:f3:70:23:a8:e3:43:00:d5:57:ca:7d:0e:ff:69:
         9c:68:bf:6b:be:24:0d:6e:6b:2a:87:fe:b2:4b:69:78:38:fd:
         dc:55:43:75:ea:d3:1c:38:53:44:84:2a:22:f6:47:cb:be:0f:
         5d:67:10:16:74:23:aa:38:35:37:a1:63:28:5c:c4:12:09:82:
         5b:5e:c9:18:b3:12:9e:b2:34:74:29:c3:e7:7e:ea:16:d2:17:
         b0:00:19:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 23:32:46 2026 by rpki-client